Security Advisory

CVE-2023-53967

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-22 21:35:30

Last updated 2025-12-22 22:05:16

Assigner VulnCheck

State PUBLISHED

Description

Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without requiring the current credentials. Attackers can exploit the userManager.cgx API endpoint by sending a crafted POST request with a new MD5-hashed password to directly modify the admin accounts authentication.

← Browse all CVEs View on cve.org ↗